postfix + mysql + sasl + pam

2013-09-02 Thread Antonio Tommasi
Hi to all i've postfix 2.9.3 on ubuntu server with sasl+pam authentication to send email. I've a mysql backhand to store users password. In this table i've a field that i use to prevent spam set to value 'Y' or 'N' to permit a user to send (Y value) or not to send (N value) email. If i change thi

Re: Log Error, File Nonexistent: /etc/ssl/certs/ca-certificates.crt

2013-09-02 Thread Viktor Dukhovni
On Mon, Sep 02, 2013 at 08:04:23PM -0700, FliedRice wrote: > Sep 2 17:56:41 boaz postfix/smtp[4234]: warning: TLS library problem: > 4234:error:02001002:system library:fopen:No such file or > directory:bss_file.c:126:fopen('/etc/ssl/certs/ca-certificates.crt','r'): The file is missing as reported

Log Error, File Nonexistent: /etc/ssl/certs/ca-certificates.crt

2013-09-02 Thread FliedRice
I have another problem with a plesk server using postfix in which I am seeing the following error in the logs: Sep 2 17:56:41 boaz postfix/smtp[4234]: warning: TLS library problem: 4234:error:02001002:system library:fopen:No such file or directory:bss_file.c:126:fopen('/etc/ssl/certs/ca-certificat

Re: Exim, DH, GnuTLS & interop

2013-09-02 Thread Viktor Dukhovni
On Mon, Sep 02, 2013 at 03:03:36AM +, Viktor Dukhovni wrote: > On Mon, Sep 02, 2013 at 01:25:02AM +, Viktor Dukhovni wrote: > > > If Peer Heinlein would be kind enough to post > > the Exim version that exhibits the problem and any relevant settings, > > that would help narrow down the pro

Re: Anyone use this email server configuration ?

2013-09-02 Thread li...@rhsoft.net
Am 02.09.2013 23:13, schrieb LuKreme: > On 02 Sep 2013, at 15:02 , li...@rhsoft.net wrote: > >> Am 02.09.2013 22:55, schrieb LuKreme: >>> On 02 Sep 2013, at 07:10 , Littlefield, Tyler wrote: Second, you'll need to encrypt your harddrive, which I doubt this whole blog covers. >>> >>> E

Re: Anyone use this email server configuration ?

2013-09-02 Thread LuKreme
On 02 Sep 2013, at 15:02 , li...@rhsoft.net wrote: > > > Am 02.09.2013 22:55, schrieb LuKreme: >> On 02 Sep 2013, at 07:10 , Littlefield, Tyler wrote: >>> Second, you'll need to encrypt your harddrive, which I doubt this whole >>> blog covers. >> >> Encrypting your hard drive is trivial, at

Re: Anyone use this email server configuration ?

2013-09-02 Thread li...@rhsoft.net
Am 02.09.2013 22:55, schrieb LuKreme: > On 02 Sep 2013, at 07:10 , Littlefield, Tyler wrote: >> Second, you'll need to encrypt your harddrive, which I doubt this whole blog >> covers. > > Encrypting your hard drive is trivial, at least in OS X and, I hear, even in > Windows. and after that?

sending mail using more then one smarthost\relayhost and sasl?

2013-09-02 Thread Eliezer Croitoru
Hey, I have a situation with a working postfix install which I am not sure how to implement. the main problem is that from time to time I get a "rejected" mail from a remote system and which I cannot do a thing about. the setup is like this: Local client(sasl) ->(submission 587)Local POSTFIX the

Re: Anyone use this email server configuration ?

2013-09-02 Thread LuKreme
Top-posting this once. This is obnoxious. Stop it. On 02 Sep 2013, at 07:35 , Bruce Markey wrote: > > -BEGIN PGP PUBLIC KEY BLOCK- > Version: GnuPG v1.4.12 (GNU/Linux) > > mQINBFIjp+0BEACohL2HkOtWdsFyR+PUltMawCIfXgo4JWYElCLKWSRdwy8H+z2/ > PmwHS2YMsNB5GX+jbv0m3EMJlqCZBRKXISeczFKSj/2Fit7

Re: Anyone use this email server configuration ?

2013-09-02 Thread LuKreme
On 02 Sep 2013, at 07:10 , Littlefield, Tyler wrote: > Second, you'll need to encrypt your harddrive, which I doubt this whole blog > covers. Encrypting your hard drive is trivial, at least in OS X and, I hear, even in Windows. I suspect it's more difficult in linux/freebsd, but I bet not much

Re: Anyone use this email server configuration ?

2013-09-02 Thread DTNX Postmaster
On Sep 2, 2013, at 17:43, Ansgar Wiechers wrote: > On 2013-09-02 Littlefield, Tyler wrote: >> On 9/2/2013 9:35 AM, Bruce Markey wrote: >>> The only way to "nsa proof" is to encrypt end to end with pgp. > ^^^ >>> I run postfix with gpg-ma

Re: Anyone use this email server configuration ?

2013-09-02 Thread Ansgar Wiechers
On 2013-09-02 Littlefield, Tyler wrote: > On 9/2/2013 9:35 AM, Bruce Markey wrote: >> The only way to "nsa proof" is to encrypt end to end with pgp. ^^^ >> I run postfix with gpg-mailgate. >> All incoming mail is encrypted with that users

Re: Anyone use this email server configuration ?

2013-09-02 Thread Littlefield, Tyler
On 9/2/2013 9:35 AM, Bruce Markey wrote: The only way to "nsa proof" is to encrypt end to end with pgp. I run postfix with gpg-mailgate. All incoming mail is encrypted with that users public key as it comes in for any mail that is not already encrypted client side using pgp. This makes sense,

Re: Anyone use this email server configuration ?

2013-09-02 Thread Bruce Markey
The only way to "nsa proof" is to encrypt end to end with pgp. I run postfix with gpg-mailgate. All incoming mail is encrypted with that users public key as it comes in for any mail that is not already encrypted client side using pgp. Bruce. -- Please use PGP, ENCRYPT everything. For informat

Re: Anyone use this email server configuration ?

2013-09-02 Thread Littlefield, Tyler
FWIW, I seen the url and stopped there. there is literally no way to NSA-proof your email for a number of reasons: First, email is sent cleartext. Even if you authenticate to send and you authenticate to receive, it's going through servers cleartext. A tap before your server is all it would take

Anyone use this email server configuration ?

2013-09-02 Thread Frank Bonnet
Hello Anyone has tested such server in real life ? http://sealedabstract.com/code/nsa-proof-your-e-mail-in-2-hours/ Thank you

Re: Hold main to recipient_bcc_map

2013-09-02 Thread Wietse Venema
Chris: > Hi all. > > Some of our users are being targeted by spam that doesn't trigger DNSBLs or > the > usual SA checks. > They don't mind moving mail manually to the junk folder but the problem comes > from the users in recipient_bcc_maps. /etc/postfix/recipient_bcc_maps: $ Old: # u...@e

RE: Duplicate postfix bounces to download

2013-09-02 Thread FliedRice
LOL, Look at how much time and effort was used in avoiding giving the answer, versus how much time was taken in giving the simple resolution. Maybe I should change the subject title for this page? - Free English & Spanish Ecards for Birthdays, Christmas, holidays, love, & just because! --

RE: Duplicate postfix bounces to download

2013-09-02 Thread Winston Smith
> Date: Mon, 2 Sep 2013 09:49:51 +0100 > From: j...@kontrol.kode5.net > To: postfix-users@postfix.org > Subject: Re: Duplicate postfix bounces to download > > It's a simple case of being able to read. There is a lot documentation > and other information available In particular if there is 'a lot o

Re: ISP has no reverse DNS for ip address

2013-09-02 Thread Stan Hoeppner
On 9/1/2013 6:57 PM, Roman Gelfand wrote: > On every machine, at different locations, I have tried "dig -x ip > address" and it works correctly. > > I have 4 messages stuck in a queue which are complaining about the > very thing that works. > > refused to talk to me: 451 Sender's ISP has no reve

Re: Duplicate postfix bounces to download

2013-09-02 Thread James Griffin
!-- On Mon 2.Sep'13 at 9:57:06 BST, FliedRice (thepuref...@yahoo.com), wrote: > Knowing how to read and knowing exactly how to implement are 2 different > things. > Even when you were in school the teacher would give you some directions beyond > reading to assist you. What is up with you peopl

Re: Duplicate postfix bounces to download

2013-09-02 Thread FliedRice
Sorry, but if you are only going to point to the documentation all the time and are not willing to give any kind of assistance beyond that, then WHY ARE YOU HERE? Just link to the documentation on the forum and close the rest down. - Free English & Spanish Ecards for Birthdays, Christmas

Re: Duplicate postfix bounces to download

2013-09-02 Thread FliedRice
Knowing how to read and knowing exactly how to implement are 2 different things. Even when you were in school the teacher would give you some directions beyond reading to assist you. What is up with you people? Perhaps if you do not wish to assist people you should not be here doing it. - F

Hold main to recipient_bcc_map

2013-09-02 Thread Chris
Hi all. Some of our users are being targeted by spam that doesn't trigger DNSBLs or the usual SA checks. They don't mind moving mail manually to the junk folder but the problem comes from the users in recipient_bcc_maps. How can I hold the mail destined to the backup server (until I can finish the

Re: Duplicate postfix bounces to download

2013-09-02 Thread James Griffin
!-- On Mon 2.Sep'13 at 9:43:47 BST, FliedRice (thepuref...@yahoo.com), wrote: > Viktor you are a class act, I thank you for making a kind effort. > > Wietse see what Viktor did? It wasn't that hard to give a little extra > assistance > without attitude. > > It is true Leonardo that I am over

Re: HELO

2013-09-02 Thread Stan Hoeppner
On 9/1/2013 7:04 PM, LuKreme wrote: > On 01 Sep 2013, at 15:35 , Noel Jones wrote: >> If you want your HELO to be consistent regardless of which IP is >> used, use a separate hostname that points to both A records. >> >> mail.example.com A A.A.A.A >> mail.example.com A B.B.B.B > > Won't this

Re: Duplicate postfix bounces to download

2013-09-02 Thread FliedRice
Viktor you are a class act, I thank you for making a kind effort. Wietse see what Viktor did? It wasn't that hard to give a little extra assistance without attitude. It is true Leonardo that I am over my head, I wonder was there ever a time when you did not know everything? You know when you ha